External Attack Surface Management (EASM)
Your monitored assets (domains, subdomains, IPs, websites), what Deepinfo discovers around them, and the issues, vulnerabilities and technologies found on them.
- Base URL
https://api.deepinfo.com/v1
Assets
Add, search, update, tag and delete the assets you monitor, and trigger an on-demand scan.
| Method | Endpoint | Path |
|---|---|---|
| POST | Asset Search/easm/assets/searchSearches your monitored assets with filters and sorting. An empty body {} returns all assets. See Getting Started → Search & Filters for the filter syntax; name accepts every searchable asset field (see Filtering). | /easm/assets/search |
| POST | Asset Export/easm/assets/search:exportExports every record matching filters (no pagination). format=csv returns CSV text; format=json returns a JSON array. Large exports can time out: narrow them with filters. | /easm/assets/search:export |
| GET | Asset Detail/easm/assets/{asset_id}Returns everything Deepinfo knows about one asset: latest WHOIS, DNS, SSL, HTTP and web data, open ports, technologies, issue and vulnerability counts, and security score. | /easm/assets/{asset_id} |
| POST | Asset Create/easm/assetsAdds assets to monitoring. Send up to 1,000 domains, subdomains, IPs or website URLs in assets. The response lists which were created, which already_existed and which were invalid. New assets are scanned automatically. | /easm/assets |
| POST | Asset Delete/easm/assets/search:deleteRemoves every asset matching filters from monitoring. Deleted assets are listed under Deleted Assets. | /easm/assets/search:delete |
| POST | Asset Enable Discovery/easm/assets/search:enable-discoveryEnables (enabled=true) or disables discovery for every asset matching filters. | /easm/assets/search:enable-discovery |
| POST | Asset Instant Scan/easm/assets/{asset_id}/instant-scanStarts an on-demand scan of an asset. Track it with Asset Instant Scan Status. | /easm/assets/{asset_id}/instant-scan |
| POST | Asset Set Tag/easm/assets/search:set-tagAdds tags (1–10) to every asset matching filters. | /easm/assets/search:set-tag |
| POST | Asset Set Weight/easm/assets/search:set-weightSets a business-importance weight (0–1000) on every asset matching filters. Weights influence prioritization and scores. | /easm/assets/search:set-weight |
| GET | Asset Instant Scan Status/easm/assets/{asset_id}/instant-scan-statusReturns the state of the latest on-demand scan: pending, queued, monitoring, failed, issue_queued or finished. Returns 404 if no instant scan was ever triggered for the asset. | /easm/assets/{asset_id}/instant-scan-status |
| PUT | Asset Update/easm/assets/{asset_id}Updates an asset's settings: discovery_enabled (use the asset as a discovery seed) and is_main_asset. | /easm/assets/{asset_id} |
| DELETE | Asset Remove Tag/easm/assets/{asset_id}/tags/{tag_id}Removes one tag from one asset. tag_id is the tag name. The tag itself stays in Asset Tags until you delete it there. | /easm/assets/{asset_id}/tags/{tag_id} |
Asset Tags
Tags you have put on assets. A tag is identified by its name ({tag_id} is the tag text).
| Method | Endpoint | Path |
|---|---|---|
| GET | Asset Tag List/easm/asset-tagsLists the tags used on your assets (tag names). | /easm/asset-tags |
| PUT | Asset Tag Update/easm/asset-tags/{tag_id}Renames a tag on every asset that has it. tag_id is the current tag name; tag (3–100 characters) is the new name. | /easm/asset-tags/{tag_id} |
| DELETE | Asset Tag Delete/easm/asset-tags/{tag_id}Deletes a tag and removes it from all assets. tag_id is the tag name. | /easm/asset-tags/{tag_id} |
Deleted Assets
Assets that were removed from monitoring.
| Method | Endpoint | Path |
|---|---|---|
| POST | Deleted Asset Search/easm/deleted-assets/searchSearches assets that were removed from monitoring, with their deleted_date. | /easm/deleted-assets/search |
| POST | Deleted Asset Export/easm/deleted-assets/search:exportExports every record matching filters (no pagination). format=csv returns CSV text; format=json returns a JSON array. Large exports can time out: narrow them with filters. | /easm/deleted-assets/search:export |
Asset History
Every change Deepinfo recorded for an asset, per data type (WHOIS, DNS, SSL, port scan, HTTP, web data, IP DNS, IP WHOIS). List endpoints return snapshot ids with their check_date; detail endpoints return the full snapshot.
| History | Available for asset types |
|---|---|
| WHOIS, DNS, SSL, port scan | domain, subdomain |
| HTTP, web data | website |
| IP DNS, IP WHOIS | ip |
Requesting a history type the asset does not have returns 404 30003 (e.g. "domain asset type does not include ipdns scope.").
| Method | Endpoint | Path |
|---|---|---|
| GET | Asset DNS History List/easm/assets/{asset_id}/dns-historyLists the DNS snapshots recorded for an asset (newest first): id and check_date of each. | /easm/assets/{asset_id}/dns-history |
| GET | Asset HTTP History List/easm/assets/{asset_id}/http-historyLists the HTTP snapshots recorded for an asset (newest first): id and check_date of each. | /easm/assets/{asset_id}/http-history |
| GET | Asset IP DNS PTR History List/easm/assets/{asset_id}/ipdns-historyLists the IP DNS (PTR) snapshots recorded for an asset (newest first): id and check_date of each. | /easm/assets/{asset_id}/ipdns-history |
| GET | Asset IP WHOIS History List/easm/assets/{asset_id}/ipwhois-historyLists the IP WHOIS snapshots recorded for an asset (newest first): id and check_date of each. | /easm/assets/{asset_id}/ipwhois-history |
| GET | Asset Port Scan History List/easm/assets/{asset_id}/port-scan-historyLists the port scan snapshots recorded for an asset (newest first): id and check_date of each. | /easm/assets/{asset_id}/port-scan-history |
| GET | Asset SSL History List/easm/assets/{asset_id}/ssl-historyLists the SSL certificate snapshots recorded for an asset (newest first): id and check_date of each. | /easm/assets/{asset_id}/ssl-history |
| GET | Asset Webdata History List/easm/assets/{asset_id}/webdata-historyLists the web data (page content, technologies, headers) snapshots recorded for an asset (newest first): id and check_date of each. | /easm/assets/{asset_id}/webdata-history |
| GET | Asset WHOIS History List/easm/assets/{asset_id}/whois-historyLists the WHOIS snapshots recorded for an asset (newest first): id and check_date of each. | /easm/assets/{asset_id}/whois-history |
| GET | Asset DNS History Detail/easm/assets/{asset_id}/dns-history/{history_id}Returns one DNS snapshot of an asset, by the history_id returned by the list endpoint. | /easm/assets/{asset_id}/dns-history/{history_id} |
| GET | Asset HTTP History Detail/easm/assets/{asset_id}/http-history/{history_id}Returns one HTTP snapshot of an asset, by the history_id returned by the list endpoint. | /easm/assets/{asset_id}/http-history/{history_id} |
| GET | Asset IP DNS PTR History Detail/easm/assets/{asset_id}/ipdns-history/{history_id}Returns one IP DNS (PTR) snapshot of an asset, by the history_id returned by the list endpoint. | /easm/assets/{asset_id}/ipdns-history/{history_id} |
| GET | Asset IP WHOIS History Detail/easm/assets/{asset_id}/ipwhois-history/{history_id}Returns one IP WHOIS snapshot of an asset, by the history_id returned by the list endpoint. | /easm/assets/{asset_id}/ipwhois-history/{history_id} |
| GET | Asset Port Scan History Detail/easm/assets/{asset_id}/port-scan-history/{history_id}Returns one port scan snapshot of an asset, by the history_id returned by the list endpoint. | /easm/assets/{asset_id}/port-scan-history/{history_id} |
| GET | Asset SSL History Detail/easm/assets/{asset_id}/ssl-history/{history_id}Returns one SSL certificate snapshot of an asset, by the history_id returned by the list endpoint. | /easm/assets/{asset_id}/ssl-history/{history_id} |
| GET | Asset Webdata History Detail/easm/assets/{asset_id}/webdata-history/{history_id}Returns one web data (page content, technologies, headers) snapshot of an asset, by the history_id returned by the list endpoint. | /easm/assets/{asset_id}/webdata-history/{history_id} |
| GET | Asset WHOIS History Detail/easm/assets/{asset_id}/whois-history/{history_id}Returns one WHOIS snapshot of an asset, by the history_id returned by the list endpoint. | /easm/assets/{asset_id}/whois-history/{history_id} |
Open Ports
Ports and services found on an asset, their history, and on-demand port scans.
| Method | Endpoint | Path |
|---|---|---|
| GET | Asset Open Port History List/easm/assets/{asset_id}/open-ports/historyLists the port scan snapshots of an asset: id and check_date. | /easm/assets/{asset_id}/open-ports/history |
| GET | Asset Open Port List/easm/assets/{asset_id}/open-portsLists the ports found on an asset, with the state and protocol of each. Filter and sort with the optional query parameters. | /easm/assets/{asset_id}/open-ports |
| GET | Asset Open Port History Detail/easm/assets/{asset_id}/open-ports/history/{history_id}Returns the ports of one historical port scan. Same filters as Asset Open Port List. | /easm/assets/{asset_id}/open-ports/history/{history_id} |
| POST | Asset Instant Open Port Scan/easm/assets/{asset_id}/open-ports/instant-scanRuns a port scan of the asset right away and returns the result in the response (status is host_down if the host did not respond). | /easm/assets/{asset_id}/open-ports/instant-scan |
| GET | Asset Open Port Count Timeline/easm/assets/{asset_id}/open-ports/count-timelineTime series of the number of open ports on an asset. | /easm/assets/{asset_id}/open-ports/count-timeline |
| GET | Asset Open Port State Stats/easm/assets/{asset_id}/stats/open-port-stateCounts the asset's ports per state (open, closed, filtered, unfiltered, open_filtered, closed_filtered). | /easm/assets/{asset_id}/stats/open-port-state |
Asset Timelines
Time series for a single asset. interval: daily, weekly or monthly.
| Method | Endpoint | Path |
|---|---|---|
| GET | Asset Issue Severity Stats Timeline/easm/assets/{asset_id}/stats/issue-severity-timelineTime series of issue severity for the selected interval (daily, weekly, monthly). | /easm/assets/{asset_id}/stats/issue-severity-timeline |
| GET | Asset Security Score Timeline/easm/assets/{asset_id}/stats/security-score-timelineTime series of security score for the selected interval (daily, weekly, monthly). | /easm/assets/{asset_id}/stats/security-score-timeline |
| GET | Asset Technology Count Timeline/easm/assets/{asset_id}/stats/technology-count-timelineTime series of technology count for the selected interval (daily, weekly, monthly). | /easm/assets/{asset_id}/stats/technology-count-timeline |
| GET | Asset Vulnerability Severity Stats Timeline/easm/assets/{asset_id}/stats/vulnerability-severity-timelineTime series of vulnerability severity for the selected interval (daily, weekly, monthly). | /easm/assets/{asset_id}/stats/vulnerability-severity-timeline |
| GET | Asset Website Count Timeline/easm/assets/{asset_id}/stats/website-count-timelineTime series of website count for the selected interval (daily, weekly, monthly). | /easm/assets/{asset_id}/stats/website-count-timeline |
| GET | Domain Security Score Timeline/easm/assets/{asset_id}/stats/domain-security-score-timelineTime series of domain security score for the selected interval (daily, weekly, monthly). | /easm/assets/{asset_id}/stats/domain-security-score-timeline |
| GET | Domain Subdomain Count Timeline/easm/assets/{asset_id}/stats/subdomain-count-timelineTime series of subdomain count for the selected interval (daily, weekly, monthly). | /easm/assets/{asset_id}/stats/subdomain-count-timeline |
Snapshots
Pre-computed summaries (security score and statistics) of an asset, a domain or your whole attack surface. instant-snapshot recalculates one on demand; the result is available shortly after via latest-snapshot.
| Method | Endpoint | Path |
|---|---|---|
| POST | Asset Instant Snapshot/easm/assets/{asset_id}/instant-snapshotRecalculates the asset snapshot now. | /easm/assets/{asset_id}/instant-snapshot |
| GET | Asset Latest Snapshot/easm/assets/{asset_id}/latest-snapshotReturns the latest pre-computed summary of an asset (security score and statistics) in snapshot. | /easm/assets/{asset_id}/latest-snapshot |
| POST | Domain Instant Snapshot/easm/assets/{domain_id}/domain-instant-snapshotRecalculates the domain snapshot now. | /easm/assets/{domain_id}/domain-instant-snapshot |
| GET | Domain Latest Snapshot/easm/assets/{domain_id}/domain-latest-snapshotReturns the latest summary of a domain including all its subdomains and websites. domain_id is the asset id of a domain. | /easm/assets/{domain_id}/domain-latest-snapshot |
| POST | Instant Snapshot/easm/instant-snapshotRecalculates the attack-surface snapshot now. | /easm/instant-snapshot |
| GET | Latest Snapshot/easm/latest-snapshotReturns the latest summary of your whole attack surface. | /easm/latest-snapshot |
Dashboard
Aggregated statistics across all your assets.
| Method | Endpoint | Path |
|---|---|---|
| GET | Assets With Most Issues/easm/assets/stats/most-issuesLists your assets with the most active issues. | /easm/assets/stats/most-issues |
| GET | Assets With Most Websites/easm/assets/stats/most-websitesLists your assets with the most websites. | /easm/assets/stats/most-websites |
| GET | Domains With Most Subdomains/easm/assets/stats/most-subdomainsLists your domains with the most subdomains. | /easm/assets/stats/most-subdomains |
| GET | Latest Added Assets/easm/assets/stats/latestLists the most recently added assets. | /easm/assets/stats/latest |
| GET | Asset Type Stats/easm/assets/stats/typeCounts your assets per type (domain, subdomain, ip, website). | /easm/assets/stats/type |
| GET | Asset Type Stats Timeline/easm/assets/stats/type-timelineTime series of your asset counts per type. | /easm/assets/stats/type-timeline |
| GET | Insight Stats/easm/assets/stats/insightsGroups assets of an asset_type by an attribute (insight_by: registrar, expiry date, registrant organization, IP, name server, mail server, ASN, SSL certificate, SSL issuer, SSL subject organization or HTTP status) and counts them. | /easm/assets/stats/insights |
| GET | Open Port Count Timeline/easm/stats/open-port-count-timelineTime series of open ports across all your assets. | /easm/stats/open-port-count-timeline |
| GET | Security Score Timeline/easm/stats/security-score-timelineTime series of your overall security score. | /easm/stats/security-score-timeline |
Discovery
Assets Deepinfo discovers around your attack surface, the rules that discover them, and discovery settings.
Discovered Assets
Candidates found by discovery rules. Each is in_review, approved (added to your assets) or ignored.
| Method | Endpoint | Path |
|---|---|---|
| POST | Discovered Asset Search/easm/discovery/assets/searchSearches discovered assets (candidates found by discovery rules) and their state. | /easm/discovery/assets/search |
| POST | Discovered Asset Export/easm/discovery/assets/search:exportExports every record matching filters (no pagination). format=csv returns CSV text; format=json returns a JSON array. Large exports can time out: narrow them with filters. | /easm/discovery/assets/search:export |
| GET | Discovered Asset Detail/easm/discovery/assets/{asset_id}Returns one discovered asset with the rules and seeds that discovered it. | /easm/discovery/assets/{asset_id} |
| POST | Discovered Asset Approve/easm/discovery/assets/search:approveApproves the discovered assets that match filters (approved). Approved assets are added to your monitored assets. An approval cannot be reverted; delete the asset instead. | /easm/discovery/assets/search:approve |
| POST | Discovered Asset Ignore/easm/discovery/assets/search:ignoreIgnores the discovered assets that match filters (ignored). | /easm/discovery/assets/search:ignore |
| POST | Discovered Asset Revert/easm/discovery/assets/search:revertReverts the discovered assets that match filters to their previous, active state. Only states set by a user can be reverted. | /easm/discovery/assets/search:revert |
| GET | Discovered Asset State Stats/easm/discovery/stats/asset-stateCounts discovered assets per state, overall and per rule type. | /easm/discovery/stats/asset-state |
Discovery Rules
Smart discovery and smart monitoring rules are managed by Deepinfo (you can tune them); custom rules are your own.
| Method | Endpoint | Path |
|---|---|---|
| POST | Asset Discovery Custom Discovery Rule Search/easm/discovery/custom-rules/searchLists your custom discovery rules. | /easm/discovery/custom-rules/search |
| GET | Asset Discovery Rule List/easm/discovery/rulesLists all discovery rules (smart discovery, smart monitoring and custom) with their counts. | /easm/discovery/rules |
| GET | Asset Discovery Smart Discovery Rule List/easm/discovery/smart-discovery-rulesLists the smart discovery rules Deepinfo runs for you. | /easm/discovery/smart-discovery-rules |
| GET | Asset Discovery Smart Monitoring Rule List/easm/discovery/smart-monitoring-rulesLists the smart monitoring rules Deepinfo runs for you. | /easm/discovery/smart-monitoring-rules |
| GET | Asset Discovery Custom Discovery Rule Detail/easm/discovery/custom-rules/{rule_id}Returns one custom discovery rule. | /easm/discovery/custom-rules/{rule_id} |
| GET | Asset Discovery Smart Discovery Rule Detail/easm/discovery/smart-discovery-rules/{rule_id}Returns one smart discovery rule. | /easm/discovery/smart-discovery-rules/{rule_id} |
| GET | Asset Discovery Smart Monitoring Rule Detail/easm/discovery/smart-monitoring-rules/{rule_id}Returns one smart monitoring rule. | /easm/discovery/smart-monitoring-rules/{rule_id} |
| POST | Asset Discovery Custom Discovery Rule Create/easm/discovery/custom-rulesCreates a custom discovery rule. filters select which domains in Deepinfo's dataset become candidates; auto_approval adds them to your assets directly. | /easm/discovery/custom-rules |
| PUT | Asset Discovery Custom Discovery Rule Update/easm/discovery/custom-rules/{rule_id}Updates a custom discovery rule (send all fields). | /easm/discovery/custom-rules/{rule_id} |
| PUT | Asset Discovery Smart Discovery Rule Update/easm/discovery/smart-discovery-rules/{rule_id}Tunes a smart discovery rule with the settings in the request body. | /easm/discovery/smart-discovery-rules/{rule_id} |
| PUT | Asset Discovery Smart Monitoring Rule Update/easm/discovery/smart-monitoring-rules/{rule_id}Tunes a smart monitoring rule with the settings in the request body. | /easm/discovery/smart-monitoring-rules/{rule_id} |
| DELETE | Asset Discovery Custom Discovery Rule Delete/easm/discovery/custom-rules/{rule_id}Deletes a custom discovery rule. | /easm/discovery/custom-rules/{rule_id} |
Settings
Discovery-wide settings.
| Method | Endpoint | Path |
|---|---|---|
| GET | Asset Discovery Settings Detail/easm/discovery/settingsReturns discovery settings: ignored_assets are never proposed as candidates. | /easm/discovery/settings |
| PUT | Asset Discovery Settings Update/easm/discovery/settingsReplaces discovery settings. Send the full ignored_assets list. | /easm/discovery/settings |
Issues
Security issues detected on your assets, grouped by issue type and category.
Issues
Search issues and change their state.
| Method | Endpoint | Path |
|---|---|---|
| POST | Issue Search/easm/issues/searchSearches issues on your assets by state, severity, type, category, asset and dates. | /easm/issues/search |
| POST | Issue Export/easm/issues/search:exportExports every record matching filters (no pagination). format=csv returns CSV text; format=json returns a JSON array. Large exports can time out: narrow them with filters. | /easm/issues/search:export |
| GET | Issue Detail/easm/issues/{issue_id}Returns one issue with its asset, type, state history and evidence. | /easm/issues/{issue_id} |
| POST | Issue Accept Risk/easm/issues/search:accept-riskAccepts the risk of the issues that match filters (risk_accepted). | /easm/issues/search:accept-risk |
| POST | Issue Ignore/easm/issues/search:ignoreIgnores the issues that match filters (ignored). | /easm/issues/search:ignore |
| POST | Issue Mark False Positive/easm/issues/search:mark-false-positiveMarks the issues that match filters as false positive (marked_as_false_positive). | /easm/issues/search:mark-false-positive |
| POST | Issue Mark Resolved/easm/issues/search:mark-resolvedMarks the issues that match filters as resolved (marked_as_resolved). | /easm/issues/search:mark-resolved |
| POST | Issue Revert/easm/issues/search:revertReverts the issues that match filters to their previous, active state. Only states set by a user can be reverted. | /easm/issues/search:revert |
Issue Stats
Issue statistics across your assets.
Most of them accept these filters:
assettype_idtype_category_id
| Method | Endpoint | Path |
|---|---|---|
| GET | Issue Asset Type Stats/easm/issues/stats/asset-typeCounts issues per asset type. | /easm/issues/stats/asset-type |
| GET | Issue Category Stats/easm/issues/stats/category-typeCounts issues per category and type. | /easm/issues/stats/category-type |
| GET | Issue Duration Stats/easm/issues/stats/durationAverage time issues stay open and time to fix. | /easm/issues/stats/duration |
| GET | Issue Severity Stats/easm/issues/stats/severityCounts active issues per severity. | /easm/issues/stats/severity |
| GET | Issue Severity Stats Timeline/easm/issues/stats/severity-timelineTime series of severity for the selected interval (daily, weekly, monthly). | /easm/issues/stats/severity-timeline |
| GET | Issue State Stats/easm/issues/stats/stateCounts issues per state. | /easm/issues/stats/state |
| GET | Issue Type Stats/easm/issues/stats/typeCounts issues per issue type (filter by severity, sort with ordering). | /easm/issues/stats/type |
Issue Types
Details, score timeline and snapshot of one issue type.
| Method | Endpoint | Path |
|---|---|---|
| GET | Issue Type Detail/easm/issues/types/{issue_type_id}Returns an issue type: description, severity, category and remediation. | /easm/issues/types/{issue_type_id} |
| POST | Issue Type Instant Snapshot/easm/issues/types/{issue_type_id}/instant-snapshotRecalculates the issue type snapshot now. | /easm/issues/types/{issue_type_id}/instant-snapshot |
| GET | Issue Type Latest Snapshot/easm/issues/types/{issue_type_id}/latest-snapshotLatest summary of one issue type across your assets. | /easm/issues/types/{issue_type_id}/latest-snapshot |
| GET | Issue Type Security Score Timeline/easm/issues/types/{issue_type_id}/security-score-timelineTime series of the security score for one issue type. interval: daily, weekly, monthly. Can take several seconds. | /easm/issues/types/{issue_type_id}/security-score-timeline |
Issue Categories
Issue categories, with score timeline and snapshot per category.
| Method | Endpoint | Path |
|---|---|---|
| GET | Issue Categories/easm/issues/categories/listLists issue categories. | /easm/issues/categories/list |
| POST | Issue Categories Instant Snapshot/easm/issues/categories/{issue_type_category_id}/instant-snapshotRecalculates the issue category snapshot now. | /easm/issues/categories/{issue_type_category_id}/instant-snapshot |
| GET | Issue Categories Latest Snapshot/easm/issues/categories/{issue_type_category_id}/latest-snapshotLatest summary of one issue category. | /easm/issues/categories/{issue_type_category_id}/latest-snapshot |
| GET | Issue Categories Security Score Timeline/easm/issues/categories/{issue_type_category_id}/security-score-timelineTime series of the security score for one issue category. interval: daily, weekly, monthly. | /easm/issues/categories/{issue_type_category_id}/security-score-timeline |
Vulnerabilities
Vulnerabilities (CVEs) that affect technologies found on your assets.
| Method | Endpoint | Path |
|---|---|---|
| POST | Vulnerability Asset Search/easm/vulnerabilities/asset-searchSearches vulnerabilities per asset (one record per asset + CVE), with state. | /easm/vulnerabilities/asset-search |
| POST | Vulnerability Search/easm/vulnerabilities/searchSearches vulnerabilities (CVEs) affecting your assets, one record per CVE. | /easm/vulnerabilities/search |
| POST | Vulnerability Asset Export/easm/vulnerabilities/asset-search:exportExports every record matching filters (no pagination). format=csv returns CSV text; format=json returns a JSON array. Large exports can time out: narrow them with filters. | /easm/vulnerabilities/asset-search:export |
| POST | Vulnerability Export/easm/vulnerabilities/search:exportExports every record matching filters (no pagination). format=csv returns CSV text; format=json returns a JSON array. Large exports can time out: narrow them with filters. | /easm/vulnerabilities/search:export |
| GET | Vulnerability Detail/easm/vulnerabilities/{vulnerability_id}Returns one vulnerability with CVE details and affected assets. | /easm/vulnerabilities/{vulnerability_id} |
| POST | Vulnerability Accept Risk/easm/vulnerabilities/search:accept-riskAccepts the risk of the asset vulnerabilities that match filters (risk_accepted). | /easm/vulnerabilities/search:accept-risk |
| POST | Vulnerability Ignore/easm/vulnerabilities/search:ignoreIgnores the asset vulnerabilities that match filters (ignored). | /easm/vulnerabilities/search:ignore |
| POST | Vulnerability Mark False Positive/easm/vulnerabilities/search:mark-false-positiveMarks the asset vulnerabilities that match filters as false positive (marked_as_false_positive). | /easm/vulnerabilities/search:mark-false-positive |
| POST | Vulnerability Mark Resolved/easm/vulnerabilities/search:mark-resolvedMarks the asset vulnerabilities that match filters as resolved (marked_as_resolved). | /easm/vulnerabilities/search:mark-resolved |
| POST | Vulnerability Revert/easm/vulnerabilities/search:revertReverts the asset vulnerabilities that match filters to their previous, active state. Only states set by a user can be reverted. | /easm/vulnerabilities/search:revert |
| GET | Vulnerability Exploitability Score Stats/easm/vulnerabilities/stats/exploitability-scoreDistribution of vulnerabilities by exploitability score. | /easm/vulnerabilities/stats/exploitability-score |
| GET | Vulnerability Known Exploitable Stats/easm/vulnerabilities/stats/known-exploitableCounts known-exploited (CISA KEV) vulnerabilities. | /easm/vulnerabilities/stats/known-exploitable |
| GET | Vulnerability Severity Stats/easm/vulnerabilities/stats/severityCounts vulnerabilities per severity. | /easm/vulnerabilities/stats/severity |
| GET | Vulnerability Severity Stats Timeline/easm/vulnerabilities/stats/severity-timelineTime series of severity for the selected interval (daily, weekly, monthly). | /easm/vulnerabilities/stats/severity-timeline |
Technologies
Technologies (software, frameworks, services) detected on your assets.
| Method | Endpoint | Path |
|---|---|---|
| POST | Technology Asset Search/easm/technologies/asset-searchSearches technologies per asset (one record per asset + technology). | /easm/technologies/asset-search |
| POST | Technology Search/easm/technologies/searchSearches technologies detected on your assets, with versions and vulnerability counts. | /easm/technologies/search |
| POST | Technology Asset Export/easm/technologies/asset-search:exportExports every record matching filters (no pagination). format=csv returns CSV text; format=json returns a JSON array. Large exports can time out: narrow them with filters. | /easm/technologies/asset-search:export |
| POST | Technology Export/easm/technologies/search:exportExports every record matching filters (no pagination). format=csv returns CSV text; format=json returns a JSON array. Large exports can time out: narrow them with filters. | /easm/technologies/search:export |
| GET | Technology Detail/easm/technologies/{tech_id}Returns one technology with its versions and affected assets. | /easm/technologies/{tech_id} |
| GET | Most Vulnerable Technologies/easm/technologies/stats/most-vulnerableLists the technologies with the most vulnerabilities. | /easm/technologies/stats/most-vulnerable |
| GET | Technology End of Life Status/easm/technologies/eol/{product}Returns end-of-life information for a product (e.g. nginx, php). | /easm/technologies/eol/{product} |
| GET | Technology Vulnerabilities/easm/technologies/vulnerabilitiesLists vulnerabilities of a technology (tech_id), optionally for a version and severity. | /easm/technologies/vulnerabilities |
| GET | Technology Asset Stats/easm/technologies/stats/assetsCounts assets per technology. | /easm/technologies/stats/assets |
| GET | Technology Category Stats/easm/technologies/stats/categoryCounts technologies per category. | /easm/technologies/stats/category |
| GET | Technology Count Timeline/easm/technologies/stats/count-timelineTime series of count for the selected interval (daily, weekly, monthly). | /easm/technologies/stats/count-timeline |
| GET | Technology Vulnerability Stats/easm/technologies/stats/vulnerabilityVulnerability statistics for technologies (filter by tech_id, version). | /easm/technologies/stats/vulnerability |